IN THE CLAIMS : 

Please amend claims 1 and 9-12, as follows: 

1. (Currently Amended) A method of scanning electronic files for computer 
viruses, the method comprising: 

identifying at a first node of a computer network, electronic files which require to 
be scanned for computer viruses; 

initiating a dialogue between said first node and a second node of the network, the 
second node comprising a virus scanning application, during which dialogue the second 
node identifies to the first node one or more portions of the electronic file required by the 
virus scanning application; 

transferring the identified portion(s) from the first node to the second node over 
the network; and 

at the second node, scanning the transferred portions for computer viruses ; and 
if the second node determines that the electronic file includes a computer virus and 

determines that the electronic file is able to be disinfected, informing the first node by the 

second node of the determinations . 

2. (Original) A method according to claim 1 and comprising identifying 
electronic files which require virus scanning, at a plurality of first nodes of the computer 
network and initiating a dialogue between the first nodes and the said second node when 
appropriate. 
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3. (Original) A method according to claim 1, wherein the first node and the 
second node are located at respective different locations in the computer network. 

4. (Original) A method according to claim 1, wherein the first node is one of a 
database server, electronic mail server, an Intemet server, a proxy server, or a firewall 
server. 

5. (Original) A method according to claim 1, wherein the dialogue is carried out 
using a network protocol carried by IP. 

6. (Currently Amended) A method according to claim 1 and comprising 
analysing the file portions received at the second node to determine whether or not the 
file contains a tiie virus or cannot be guaranteed to not contain a the virus, and retuming 
the result to the first node over the network. 

7. (Original) A method according to claim 6 and comprising transferring from the 
second node to the first node data portions to be written into the file to disinfect the file. 

8. (Original) A method according to claim 6 and comprising sending instructions 
from the second node to the first node to inform the first node how to disinfect the file. 
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9. (Currently Amended) An anti- virus scanning system for use in scanning 
electronic files in a computer network, the system comprising: 

a first computer having processing means arranged to identify electronic files 
which should be scanned for computer viruses; and 

a second computer having processing means arranged to perform a virus scanning 
operation, 

the first computer further comprising communication means for initiating a 
dialogue between the first computer and the second computer, during which the second 
computer identifies to the first computer those portions of the electronic files required by 
the first computer for performing the virus scanning operation, and for transferring those 
portions to the second compute r, and 

the second computer further comprising determination means for scanning the 
transferred portions for computer viruses, and, when the second computer determines that 
the electronic files include a computer virus and determines that the electronic files are 
able to be disinfected, informing the first computer of the determinations . 

10. (Currently Amended) A computer memory encoded with executable 
instructions representing a computer program for causing a first computer connected to a 
computer network to: 
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identify an electronic file files which is required require to be scanned for 
computer viruses; 

initiate a dialogue between the first computer and a second computer also 
connected to the computer network; 

receive fi"om the second computer an identification of portions of the electronic 
file which are required for virus scarming of the electronic file files at the second 
computer; and 

transfer the identified portions from the first computer to the second computer; 
scan the transferred portions for computer viruses at the second computer; and 
if the second computer determines that the electronic file includes a computer 
virus and determines that the electronic file is able to be disinfected. 

inform the first computer by the second computer of the determinations . 

11. (Currently Amended) A computer memory encoded with executable 
instructions representing a computer program for causing a first computer connected to a 
computer network to: 

receive a dialogue initiation request from a second computer also connected to the 
computer network concerning an electronic file identified by the second computer as 
requiring a virus scan; 
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identify to the second computer those portions of the electronic file which are 
required by the first mentioned computer for performing a virus scanning operation at the 
first computer; and 

receive the identified portions of the electronic file from the second compute r; and 
inform the second computer of an outcome if the first computer determines that 

the electronic file includes a computer virus and determines that the electronic file is able 

to be disinfected . 

12. (Currently Amended) A method of disinfecting an electronic file stored at a 
first node of a computer network, after the file has been identified as containing a virus 
by a virus scanning engine located at a second network node, wherein the first node and 
the second node initiate a dialogue, the method comprising: 

informing the first node by the second node that a virus has been identified and is 
able to be disinfected; 

sending fi-om the second node to the first node, data portions to be written into the 
infected file and/or instructions for disinfecting the file; and 

receiving the data portions and/or instructions at the first node and writing the data 
portions into the infected file and/or carrying out said instructions. 

13. (Original) A method according to claim 12, wherein said first and second 
nodes are respective computer workstations coupled to a common network. 
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14. (Previously Presented) A method according to claim 13, wherein the 
workstation corresponding to the second node is arranged to communicate with a 
plurality of workstations corresponding to respective first nodes. 
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